A client can add a guid to the dcerpc ncacn header, which means the payload
will start 16 bytes later. In order to parse such a packet we need to pass special
flags to the ndr parser.
This also applies to 3.6 and maybe 3.5